CVE-2022-49508

Updated: 2025-10-05 01:53:49.23462

Description:

In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elan_input_configured 'input' is a managed resource allocated with devm_input_allocate_device(), so there is no need to call input_free_device() explicitly or there will be a double free. According to the doc of devm_input_allocate_device(): * Managed input devices do not need to be explicitly unregistered or * freed as it will be done automatically when owner device unbinds from * its driver (or binding fails).


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2025:1749568993 2025-06-11 00:59:58
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2025:1749562017 2025-06-11 00:59:59